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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A method for registering a first device with a second 
device, comprising the steps of: 

generating a first secret known to the first device and a second secret known to 
the second device using communications between the first device and the second device 
over a first communication channel using a first communication method : 

from the first device, producing first information derived from the first secret; 

from the second device, producing second information derived fi-om the second 

secret; 

using a communication channel other than the first communication channel and a 
communication method other than the first communication method, comparing the first 
information and the second information in a manner sufficient to assure a third party that 
the first secret and the second secret are the same; and 

enabling the first and second device to use the first and second secrets upon the 
third party being assured that the first secret and the second secret are the same. 

2. (Original) The method of claim 1 wherein the first device and the second device 
generate the first and second secrets using Diffie-Hellman key exchange. 

3. (Original) The method of claim 1 wherein: 

the first information is derived from a hash of the first secret; and 
the second information is derived from a hash of the second secret. 

4. (Original) The method of claim 1 wherein the first information comprises a 
credential. 
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5 . (Currently Amended) A method for registering a first device with a second 
device, comprising the steps of: 

(a) communicating a commitment from the first device to the second device over 
a first communication channel using a first communication method , said commitment 
comprising information derived from a security value known to the first device; 

(b) communicating from the second device to the first device over the first 
communication channel, information for use in generating a first secret; 

(c) after step (b), communicating the security value from the first device to the 
second device; 

(d) generating the first secret at the first device and a second secret at the second 

device; 

(e) from the first device, on a communication channel other than the first 
communication channel and using a communication method other than the first 
communication method , validating first verification information related to the first secret; 

(f) from the second device, on a communication channel other than the first 
communication channel and using a communication method other than the first 
communication method , validating second verification information related to the second 
secret; and 

(g) enabling the first and second devices to use the first and second secrets upon a 
third party being assured that the first secret and the second secret are the same. 

6. (Original) The method of claim 5 wherein the commitment is a hash of the 
security value. 

7. (Original) The method of claim 5 wherein the first verification information is a 
hash value derived from the first secret and the security value. 

8. (Original) The method of claim 7 wherein the first verification information is a 
hash value derived from a catenation of the first secret with the security value. 
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9. (Previously Presented) The method of claim 5 wherein the length of the first 
verification information is shorter than a length needed to provide an identical level of 
security in a method that does not utilize said commitment. 

10. (Original) The method of claim 5 wherein the first verification information 
comprise a credential. 

1 1 . (Currently Amended) A device capable of registering with an other device, 
comprising: 

an interface to a first communication channel associated with a first 
communication method : 

an interface to a second communication channel associated with a communication 
method other than the first communication method : 

a registration process that (1) generates a first secret that is to-be-shared with the 
other device using the first communication channel, (2) validates on the second 
communication channel verification information derived from the to-be-shared secret, 
and (3) is enabled to use the to-be-shared secret upon receipt of an indication that a third 
party is assured that the first secret is shared with the other device. 

12. (Original) The device of claim 1 1 wherein the device generates the first secret 
using a Diffie-Hellman key exchange. 

1 3 . (Original) The device of claim 1 1 wherein the verification information is derived 
from a hash of the first secret. 

14. (Original) The device of claim 1 1 wherein the verification information comprises 
a credential. 
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1 5 . (Currently Amended) A device capable of registering with an other device, 

comprising: 

an interface to a first communication channel associated with a first 
communication method : 

an interface to a second communication channel associated with a communication 
method other than the first communication method: and 
a registration process that (1) receives, on the first communication channel, a 
commitment derived from a security value; (2) produces, on the first communication 
channel, information for use in generating a shared secret; (3) after step (2), 
communicates the security value on the first communication channel; (4) generated a first 
secret to-be-shared with the other device, (5) communicates on the second 
communication channel verification information related to the first secret, and (6) is 
enabled to use the first secret upon receipt of an indication that a third party is assured 
that the first secret is hared with the other device. 

16. (Original) The device of claim 15 wherein the commitment is a hash of the 
security value. 

17. (Original) The device of claim 15 wherein the verification information is a hash 
value derived from the first secret and the security value. 

1 8 . (Original) The device of claim 1 7 wherein the verification information is a hash 
value derived from the catenation of the first secret with the security value. 

19. (Previously Presented) The device of claim 15 wherein the length of the 
verification information is shorter than a length needed to provide an identical level of 
security in a method that does not utilize said commitment. 

20. (Original) The method of claim 15 wherein the verification information is a 
credential. 
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2 1 . (Currently Amended) A server capable of registering a device to a network, 

comprising: 

an interface to a first communication channel associated with a first 
communication method : 

an interface to a second communication channel associated with a communication 
method other than the first communication method : and 

a registration process that (1) generates a first secret that is to-be-shared with the 
devise using the first communication channel; (2) validated on the second communication 
channel verification information derived from the first secret, and (3) enables the network 
to use the first secret upon receipt of an indication that a third party is assured that the to- 
be-shared secret is shared with the device. 

22. (Original) The server of claim 2 1 wherein the server generates the first secret 
using Diffie-Hellman key exchange. 

23. (Original) The server of claim 21 wherein the verification information derived 
firom a hash of the first secret. 

24. (Original) The server of claim 21 wherein the verification information comprises 
a credential. 
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25 . (Currently Amended) A server capable of registering a device to a network, 

comprising: 

an interface to a first communication channel associated with a first 
communication method : 

an interface to a second communication channel associated with a communication 
method other than the first communication method : and 

a registration process that (1) communicates over the first communication channel 
a commitment comprising information derived from a security value; (2) communicates 
over the first communication channel information for use in generating a shared secret; 

(3) after step (2), communicates the security value over the first communication channel; 

(4) generates a first secret to-be-shared with the device; (5) communicates over the 
second communication channel verification information related to the secret; and (6) 
enables the network to use the first secret upon receipt of an indication that a third party 
is assured that the first secret is shared with the device. 

26. (Original) The server of claim 25 wherein the commitment is hash of the security 
value. 

27. (Original) The server of claim 25 wherein the verification information is a hash 
value derived from the secret and the security value. 

28. (Original) The server of claim 27 wherein the verification information is a hash 
value derived from the catenation of the first secret with the security value. 

29. (Previously Presented) The server of claim 25 wherein the length of the 
verification information is shorter that a length needed to provide an identical level of 
security in a method that does not utilize said commitment. 

30. (Original) The method of claim 25, wherein the verification information 
comprises a credential. 
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